My Pentest Cheatsheets

大家好！👋

I found this note taking strategy the best:

• I use vscode with Markdown *.md file format,
• with a directory structure grouping notes under cmds/<os>/, practices/, protocols/, and tools/{apt,github,web}/,
• where each line of each file is using a prefix of one of:
  • # the beginning of a comment line, which contains Markdown format
  • $ the beginning of a Linux/MacOS bash prompt command
  • C:\> the beginning of a Windows cmd.exe prompt command
    and a few other specialty shells like:
  • PS> powershell
  • msf> Metasploit msfconsole
  • etc.

This convention makes note-taking very clear and reusable. I frequently utilize the Ctrl-P hotkey to quickly jump to a topic by file, or Ctrl-Shift-F to search for a note by keyword.

Additionally, during a pentesting engagement, I will create a directory structure like net/<IP>.md with one file per host, where I keep additional notes regarding the history of my input/output interactions with each machine on the network.

This repo is mainly for me to refer back to, but I'm sharing publicly just in case anyone else finds these helpful!

P.S. Rather than browsing online in the Github viewer, just clone and open in vscode. Or else toggle the ?plain=1 view always. Otherwise the format will appear difficult to read.

Additional Resources

There are many many similar works and each has their own merit. It would be a waste to reproduce them here. Instead, I'll link to my favorites.

Good Reads

• Cybersec professor's links
  • https://www.mjkranch.com/2019/06/tips-for-success-in-pwk-oscp/
  • https://cs485.mjkranch.com/resources.html
  • https://cs485.mjkranch.com/scoreboard_labs.html
• Read all of https://book.hacktricks.xyz/
• Cherry pick what you don't know from https://academy.hackthebox.com/modules
• Learn what each SecList is for https://github.com/danielmiessler/SecLists

Community

• InfoSec Prep Discord channel #oscp-pass-fail-exam-experiences

Guides and Practice Ranges

• Hack-the-Box (HTB) clones https://forum.hackthebox.com/t/oscp-practice/531

• VulnHub clones https://www.abatchy.com/2017/02/oscp-like-vulnhub-vms

• Even more virtual machines

• Walkthroughs

  • 0xdf hacks stuff https://0xdf.gitlab.io/tags.html

• Buffer Overflow

  • Guide https://github.com/justinsteven/dostackbufferoverflowgood
  • Guide https://www.trenchesofit.com/2020/09/12/oscp-buffer-overflow-write-up/
  • Practice Range https://tryhackme.com/room/bufferoverflowprep

• Windows Elevation of Privilege

  • Course https://www.udemy.com/course/windows-privilege-escalation/
  • Practice Range https://tryhackme.com/room/windows10privesc

• Linux Elevation of Privilege

  • Course https://www.udemy.com/course/linux-privilege-escalation/
  • Practice Range https://tryhackme.com/room/linuxprivesc

• Watch Ippsec's YouTube channel

• Converting Metasploit .rb exploits to stand-alone https://netsec.ws/?p=262

Worthy Tools

• This report generator from markdown template
  https://github.com/noraj/OSCP-Exam-Report-Template-Markdown
• OffensiveNim
  • Nim language https://nim-lang.org/
  • Project https://github.com/byt3bl33d3r/OffensiveNim
  • Guide https://s3cur3th1ssh1t.github.io/Playing-with-OffensiveNim/
• Red-Teaming-Toolkit https://github.com/infosecn1nja/Red-Teaming-Toolkit
• Nishang https://github.com/samratashok/nishang
• Phantom Evasion https://github.com/oddcod3/Phantom-Evasion
• AVIator https://github.com/Ch0pin/AVIator

Cheatsheets

• The Ultimate List of SANS Cheat Sheets https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/

• PayloadsAllTheThings collection https://github.com/swisskyrepo/PayloadsAllTheThings

• thehackingnomad collection https://blog.thehackingnomad.com/

• Liodeus https://liodeus.github.io/2020/09/18/OSCP-personal-cheatsheet.html

Helpful Cert Reviews

• "Gatekeeper Mentality" by xbufu, Aug 2021 https://web.archive.org/web/20210814192414/https://bufu-sec.com/oscp-review/

• Steffin Stanly, Jul 2021 https://steffinstanly.github.io/PWK-and-OSCP-Review/

• JohnJHacking, Feb 2021 https://johnjhacking.com/blog/the-oscp-preperation-guide-2020/